CVEvulnerability

CVE-2025-6021

7.5 HIGH Published 2025-06-12 Modified 2026-10-12 Official page ↗
Status
Modified
Published
2025-06-12
Last modified
2026-10-12
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-787

Description

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

Affected configurations

• xmlsoft libxml2 (< 2.14.4) • redhat jboss core services • redhat openshift container platform 4.12 • redhat openshift container platform 4.13 • redhat openshift container platform 4.14 • redhat openshift container platform 4.15 • redhat openshift container platform 4.16 • redhat openshift container platform 4.17 • redhat openshift container platform 4.18 • redhat openshift container platform for arm64 4.13 • redhat openshift container platform for arm64 4.14 • redhat openshift container platform for arm64 4.15 • redhat openshift container platform for arm64 4.16 • redhat openshift container platform for arm64 4.17 • redhat openshift container platform for arm64 4.18 • redhat openshift container platform for ibm z 4.13 • redhat openshift container platform for ibm z 4.14 • redhat openshift container platform for ibm z 4.15 • redhat openshift container platform for ibm z 4.16 • redhat openshift container platform for ibm z 4.17 • redhat openshift container platform for ibm z 4.18 • redhat openshift container platform for linuxone 4.13 • redhat openshift container platform for linuxone 4.14 • redhat openshift container platform for linuxone 4.15 • redhat openshift container platform for linuxone 4.16 • redhat openshift container platform for linuxone 4.17 • redhat openshift container platform for linuxone 4.18 • redhat openshift container platform for power 4.13 • redhat openshift container platform for power 4.14 • redhat openshift container platform for power 4.15 • redhat openshift container platform for power 4.16 • redhat openshift container platform for power 4.17 • redhat openshift container platform for power 4.18 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0 • redhat enterprise linux eus 8.4 • redhat enterprise linux eus 8.6 • redhat enterprise linux eus 8.8 • redhat enterprise linux eus 9.4 • redhat enterprise linux eus 9.6 • redhat enterprise linux eus 10.0 • redhat enterprise linux for arm 64 8.0 aarch64 • redhat enterprise linux for arm 64 9.0 aarch64 • redhat enterprise linux for arm 64 9.4 aarch64 • redhat enterprise linux for arm 64 10.0 aarch64 • redhat enterprise linux for arm 64 eus 9.4 aarch64 • redhat enterprise linux for arm 64 eus 9.6 aarch64 • redhat enterprise linux for arm 64 eus 10.0 aarch64 • redhat enterprise linux for ibm z systems 8.0 s390x • redhat enterprise linux for ibm z systems 9.4 s390x • redhat enterprise linux for ibm z systems 10.0 s390x • redhat enterprise linux for ibm z systems eus 9.0 s390x • redhat enterprise linux for ibm z systems eus 9.4 s390x • redhat enterprise linux for ibm z systems eus 9.6 s390x • redhat enterprise linux for ibm z systems eus 10.0 s390x • redhat enterprise linux for power little endian 8.0 ppc64le • redhat enterprise linux for power little endian 9.0 ppc64le • redhat enterprise linux for power little endian 10.0 ppc64le • redhat enterprise linux for power little endian eus 9.4 ppc64le … and 12 more

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References